otinstaller · Web and search

Install BlackWidow on Linux in one command

BlackWidow crawls a website, collects its URLs, parameters, emails, and phone numbers, and can fuzz the parameters it finds for common web vulnerabilities. The crawl is active traffic to the target.

BlackWidow in three lines

pipx install otinstaller
ot install blackwidow
ot run blackwidow -- url:https://example.com

Runs 1N3/BlackWidow (Other, ★ 1.8k, otinstaller v0.0.4, registry updated Oct 13, 2026). otinstaller installs and runs it; it does not change or verify it.

What BlackWidow is for

Site-wide link and contact collection for an authorised assessment.

Typed inputs for BlackWidow

otinstaller translates these prefixes into BlackWidow's own flags. Anything else after -- is passed through unchanged, so every original flag still works.

url:: url · ot run blackwidow -- url:https://example.com
d:: domain · ot run blackwidow -- d:example.com

Run every installed tool that takes the same input at once: ot run --all url:https://example.com

Where the results go

Every run lands under ./results/blackwidow/<target>/ as a timestamped output file plus a .meta.json sidecar: the exact command, start and end time, exit code, and the SHA-256 of the output. Group runs with --case, compare the last two with ot diff blackwidow <target>, and pull indicators out with ot extract.

Before you run it

Active scanner. Only run it against targets you have permission to test.
Installed from git; expect a longer first install.

Update, remove, inspect

ot info blackwidow      # inputs, flags, keys
ot example blackwidow   # sample output
ot update blackwidow    # move to the next tested version
ot remove blackwidow    # delete its virtualenv

Full reference for this tool: docs for blackwidow.

Pairs with

ParamSpider

ParamSpider pulls every archived URL for a domain from the Wayback Machine and keeps the ones with query parameters.

FinalRecon

FinalRecon runs a set of web recon checks against a URL in one go: headers, SSL certificate, WHOIS, crawler, DNS, subdomains, directory search, and a port scan.

OWASP Nettacker

OWASP Nettacker runs port scans, service detection, and vulnerability checks against hosts and ranges, and writes HTML or JSON reports.

FAQ

BlackWidow with otinstaller, answered

How do I install BlackWidow on Kali or Ubuntu?

Install otinstaller once with pipx install otinstaller, run ot init, then ot install blackwidow. The tool lands in its own virtualenv under ~/.otinstaller/, pinned to a version that was tested on Ubuntu, so nothing touches your system Python. ot doctor flags a missing git or venv module.

Which inputs does BlackWidow take through otinstaller?

url: (url), d: (domain). otinstaller maps each prefix to BlackWidow's own flag. Everything after -- that is not a typed input is passed through unchanged, so the original flags still work.

Where does otinstaller save BlackWidow results?

Under ./results/blackwidow/<target>/ in the folder you run from, as a timestamped output file plus a .meta.json sidecar with the exact command, timing, exit code, and SHA-256. Add --case <name> to group runs, and ot diff blackwidow <target> to compare the last two.

Does BlackWidow need an API key or a login?

No key is required for the basic run. Optional keys, where the project supports them, go in ~/.otinstaller/.env and are passed only to tools that declare them.

Can I run BlackWidow together with other tools?

Yes. ot run --all url:https://example.com runs every installed tool that accepts url input, in parallel, including BlackWidow. Save the combination as a playbook to repeat it.